Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          Rq7Ije+5zEd6PsYze4wj2i/LyZ05X9BLWqr40gibQgw=
Subject key identifier:   84:6E:A6:10:EA:94:94:5E:9C:EE:C4:3E:1E:CF:CF:70:81:5E:32:35
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019F8379B16024D7B9898EF64656914822FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          19EE
Signing time:             Tue 21 Jul 2026 07:00:18 +0000
Manifest this update:     Tue 21 Jul 2026 07:00:18 +0000
Manifest next update:     Wed 22 Jul 2026 07:00:18 +0000
Files and hashes:         1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
                          2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: Gki+qRvrbRXT6eXSARPqNHFIVGa7tJPMEqlg3knD4zg=)
                          4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
                          5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
                          6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=)
                          7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
                          8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
                          9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
                          10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
                          11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
                          12: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
                          13: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
                          14: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
                          15: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
                          16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
                          17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
                          18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=)
                          19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
                          20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
                          21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:79:b1:60:24:d7:b9:89:8e:f6:46:56:91:48:22:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jul 21 07:00:18 2026 GMT
            Not After : Jul 22 07:00:18 2026 GMT
        Subject: CN=846ea610ea94945e9ceec43e1ecfcf70815e3235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:96:a9:e9:51:60:77:44:fd:92:9f:dd:22:
                    91:6e:1a:35:7a:7c:06:e0:1b:d6:74:b2:42:64:49:
                    d4:54:6f:04:fc:6a:00:75:29:47:e9:d8:5d:de:13:
                    d7:05:d8:79:b8:4b:56:65:a9:b1:28:c4:29:fe:17:
                    d6:dd:38:a1:72:4f:18:74:d1:ff:c6:8b:71:75:26:
                    20:65:98:0c:1d:ce:f4:ad:b5:55:bb:b2:a7:08:f7:
                    97:0a:5d:89:4b:91:aa:02:c3:89:e7:76:7f:e8:21:
                    79:c9:22:b7:a2:17:5d:3a:ce:25:12:7f:91:07:96:
                    77:9b:1c:c8:ea:c3:ac:23:16:27:c1:e8:91:70:49:
                    bb:bb:be:ad:c3:09:1f:ef:53:01:9c:a0:93:1c:67:
                    b6:96:0b:b3:1a:47:f0:de:70:7c:f0:b9:00:97:eb:
                    f4:c2:9c:5a:b8:ed:dc:aa:6c:b3:34:46:ef:d8:e4:
                    55:f3:1f:4d:0e:d0:d4:c0:00:26:c1:01:5d:5b:fb:
                    bd:7a:b7:0d:d6:96:d5:9a:54:c9:e0:bc:9e:b2:e0:
                    e2:8a:b9:55:0f:6c:cd:da:25:22:51:25:c9:7c:75:
                    aa:91:2d:bf:d1:8a:5e:3b:e6:c5:ec:bc:b6:48:af:
                    be:ea:87:aa:20:c4:36:ac:c8:d4:49:9f:84:3a:fd:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6E:A6:10:EA:94:94:5E:9C:EE:C4:3E:1E:CF:CF:70:81:5E:32:35
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:5e:0d:85:25:1c:66:e1:bb:af:80:73:5d:c3:fe:08:06:
         2e:8c:b5:5e:da:37:6e:57:f0:d9:b1:06:35:48:d2:7a:9d:38:
         85:0a:e6:48:a4:6b:7e:33:05:ea:ed:69:10:84:27:da:f9:94:
         d6:5f:c1:bd:79:9b:a1:6d:d2:19:14:78:af:44:95:95:cd:6e:
         7a:29:c6:56:05:d9:ed:08:04:05:5a:dd:43:b9:93:41:5d:c5:
         bd:2d:b3:ff:76:f0:53:51:c3:eb:5d:8c:7a:1f:3c:85:1c:f4:
         ff:48:55:88:4f:41:fe:ad:5a:93:e4:b0:67:09:16:1f:8e:db:
         34:e2:1e:6c:15:2d:c3:01:16:60:59:d9:2e:d1:e9:89:34:59:
         68:1b:72:b4:a7:33:bb:13:08:f5:5a:f4:cf:af:28:d0:8d:02:
         43:e9:cb:5b:7a:19:47:19:20:21:8a:88:5e:09:17:fd:aa:95:
         84:94:d3:f0:fd:45:2b:f4:d1:51:6d:de:7c:08:3f:86:2e:2c:
         39:da:87:56:20:5b:e1:05:4f:36:0d:7d:94:9b:f5:64:e2:84:
         ee:37:38:a4:2d:0b:6b:b2:38:9a:34:19:4d:a0:c2:e6:30:25:
         a0:60:0e:89:53:b5:68:b5:f6:a1:3e:16:28:6f:aa:74:ae:1f:
         d0:9c:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:33:08 2026 by rpki-client